Posted on 2000-04-21
Help I'm scared.
From pretty much a fresh install of win98 my brother installed sim city 2000 (this is probably not important).
When the machine was then put on standby it would not wake up and on rebooting the following had occured:
THE HARD DRIVE WAS NOT BOOTABLE (no command.com)ALL FILES ON THE HARD DISK HAD BEEN ERASED! with the exception of the following:
ctsyn.ini in the windows directory
(just a load of sound blaster settings)
5 .url files in the windows\favorites\links folder
and a couple of other empty directories
Looking at the .url files and comparing with .url files on another computer revealed something strange. An extra line had been added to each file this line being if the form
where X is a letter or a number (18 in total)
So I think it sounds viral but this seems a particularly powerful and vicious one. I don't know much about viruses so I may be wrong. Can anyone verify this and identify the problem and is a recovery possible? (I won't hold my breath on the recovery front). (OK so I didn't lose much but if this happens again or to the other computer I stand to lose a lot of stuff).